Abstract:ShieldX is one of a growing number of startups to use microsegmentation as a foundation to deliver more flexible security to protect east/west traffic in virtual and cloud environments. What sets it apart from its rivals is the breadth of security controls the APEIRO platform provides, and APEIRO's quick deployment. The security functions available as microservices in APEIRO include TLS traffic decryption and termination, IDS/IPS, native sandboxing or integration with FireEye's AX and Helix, secure web gateway functionality, virtual TAP traffic collection and aggregation, full packet capture and logging, DLP, NGFW, and anomaly and lateral movement detection. Each microservice runs in its own Docker container and they are combined in a virtual chassis. Deployment is fast thanks to ShieldX's extensive use of automation and machine learning. It can automatically connect to a range of public and private clouds, including Amazon AWS EC2, Microsoft Azure, OpenStack, and VMware ESXi.